$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: w5IYnnZkkv76kLAShWuoPTe0QoTJGP3zHyeZ4LSALQ8= Subject key identifier: 6D:1B:AC:44:D5:06:13:93:9D:81:CB:03:A5:8D:B9:08:13:AA:02:E6 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 013A Signing time: Thu 15 May 2025 03:54:22 +0000 Manifest this update: Thu 15 May 2025 03:54:22 +0000 Manifest next update: Thu 22 May 2025 03:54:22 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: sb5lP/jRKSobnvg2HFYrUHXho/Fs1A3ckywao8Zo8W8=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: HE0CwiBUoR42Ac8HkzfJLJ/ETIx9kfwRBCLdGKiPhXc=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: OKWZlml7xUzPeJ1MZszk7oG4XbhbR85w9J1Q8mg/N3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: May 15 03:54:22 2025 GMT Not After : May 22 03:54:22 2025 GMT Subject: CN=6825656e-dfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:0b:ba:ad:b3:d5:fe:3c:61:ba:7a:59:9f: 2d:ff:19:7c:3a:29:99:bc:c5:85:09:35:d3:b3:9d: 73:d2:98:97:a4:d7:9f:fc:8d:72:ec:e7:eb:e8:7a: 23:c0:03:d0:2f:66:e3:3f:61:a3:4f:d4:e5:1d:a5: ed:74:06:25:83:bb:9b:b3:91:3d:c2:ea:bc:5c:d3: b3:b6:53:50:e6:ae:c5:54:9b:23:c7:42:3b:23:31: 85:88:01:b8:57:46:b7:96:a9:8a:cb:a9:7f:78:1d: 51:87:24:92:83:3e:c2:c2:67:44:04:91:7f:18:67: f0:ad:7d:29:e0:5b:a9:d3:68:af:b1:34:3d:5b:87: 44:4e:9e:0c:5e:46:56:d9:71:d6:c2:dd:1f:e3:eb: a9:8d:fb:af:7e:70:ee:7a:56:8d:f8:35:68:6c:bd: ab:c8:95:ec:51:da:79:9e:73:16:89:bd:75:11:1c: 68:6c:64:a0:0b:25:68:b4:97:24:77:92:37:b8:db: b9:02:b9:9c:15:32:c8:78:be:73:41:12:27:03:00: df:68:20:fa:58:4e:fe:f1:ce:1c:0c:be:d9:33:ad: 5d:43:f4:cd:b4:81:e4:48:48:23:1c:e0:75:10:23: a2:2b:4a:64:6e:f1:92:69:0b:4e:3a:50:c6:71:ef: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1B:AC:44:D5:06:13:93:9D:81:CB:03:A5:8D:B9:08:13:AA:02:E6 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:49:0b:4c:fc:e2:02:11:8e:53:eb:bc:52:af:05:c7:60:a4: 06:c9:65:1d:bc:13:d0:9e:e6:bd:72:27:5d:23:55:48:97:8e: c6:5f:ab:a0:2e:2f:28:31:3d:c2:e6:82:72:a4:e2:50:93:f1: 65:3d:49:7a:e3:b5:c6:56:e7:18:7a:d7:a6:92:57:d7:45:50: 78:43:c8:c9:0d:b4:54:38:f1:c7:dd:75:8b:4d:8d:18:78:78: 69:ec:91:24:d2:15:01:42:00:85:60:3d:4e:57:d9:f5:52:37: 62:17:ab:46:35:8a:12:48:85:ca:2d:a5:8a:60:fe:d5:5a:20: d5:83:80:98:38:07:d3:39:ef:21:2a:56:1c:b7:30:fe:99:22: f0:31:10:b0:5d:31:b5:94:bc:15:19:19:74:28:7f:74:1e:97: 48:78:71:e6:a8:48:bc:f9:ae:6e:fb:48:32:67:ca:dd:2c:56: c0:44:d9:1e:ce:6e:99:8f:19:be:a3:4c:c1:65:dc:62:7d:6f: f2:7f:31:12:78:cf:d6:5a:71:91:b1:3f:82:65:49:7e:a6:27: f3:81:57:bd:ee:cf:ab:17:38:65:54:82:e9:4b:98:25:46:8a: 0d:97:e9:43:33:dd:d2:92:ce:2a:4f:07:75:0e:89:b9:c7:29: 5f:9b:4f:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNTE1MDM1NDIyWhcNMjUwNTIyMDM1NDIyWjAYMRYwFAYD VQQDEw02ODI1NjU2ZS1kZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SQLuq2z1f48Ybp6WZ8t/xl8OimZvMWFCTXTs51z0piXpNef/I1y7Ofr6Hoj wAPQL2bjP2GjT9TlHaXtdAYlg7ubs5E9wuq8XNOztlNQ5q7FVJsjx0I7IzGFiAG4 V0a3lqmKy6l/eB1RhySSgz7CwmdEBJF/GGfwrX0p4Fup02ivsTQ9W4dETp4MXkZW 2XHWwt0f4+upjfuvfnDuelaN+DVobL2ryJXsUdp5nnMWib11ERxobGSgCyVotJck d5I3uNu5ArmcFTLIeL5zQRInAwDfaCD6WE7+8c4cDL7ZM61dQ/TNtIHkSEgjHOB1 ECOiK0pkbvGSaQtOOlDGce8ONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0brETV BhOTnYHLA6WNuQgTqgLmMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLSQtM/OICEY5T67xSrwXHYKQGyWUdvBPQnua9ciddI1VIl47GX6ug Li8oMT3C5oJypOJQk/FlPUl647XGVucYetemklfXRVB4Q8jJDbRUOPHH3XWLTY0Y eHhp7JEk0hUBQgCFYD1OV9n1UjdiF6tGNYoSSIXKLaWKYP7VWiDVg4CYOAfTOe8h KlYctzD+mSLwMRCwXTG1lLwVGRl0KH90HpdIeHHmqEi8+a5u+0gyZ8rdLFbARNke zm6Zjxm+o0zBZdxifW/yfzESeM/WWnGRsT+CZUl+pifzgVe97s+rFzhlVILpS5gl RooNl+lDM93Sks4qTwd1Dom5xylfm08o -----END CERTIFICATE-----Generated at Fri May 16 18:12:41 2025 by rpki-client